Email info

The email was sent on 2018-02-12 21:20:42 and appeared to be from off.ofice83@yahoo.com but this address could have been spoofed.
If you replied to this email, your reply would have been sent to delivery.company60@yandex.com which was the scammer's actual email address.
It was probably sent from 106.10.244.83 in San Antonio, TX, Location found from phone number in email

Email header

Used when there is no 'to' field in the header, does the same thing (says what email address(es) the email is sent to

[email address removed] Mon, 12 Feb 2018 18:20:41 +0000

Return-Path:

The address the email was sent from, or at least the one this email should be 'bounced' back to if it can not be delivered. Often spammers and scammers modify the email header to set a different return-path

[email address removed]

X-YahooFilteredBulk:

The IP here was blacklisted by Yahoo for sending spam

106.10.244.83

Received-SPF:

Returns 'pass' if the email was sent legitimately, 'neutral' if the server thinks nothing is right or wrong, 'soft fail' if it's not a serious issue, 'fail' if the email was sent by an unauthorised user or IP address (often if the mail server is hacked into), 'none' if the server can't tell, 'permerror' if the mail client does not understand what the server is saying, 'temperror' if the client can't connect to the server. More info

The IP address the email was originally sent from, sometimes wrong - the bottom 'Received' field in the email header is the most reliable indicator of what IP the email came from

[106.10.244.83]

Authentication-Results:

Returns the result given in the Received-SPF field, and says spf=pass if the email passed authentication. Also uses the DKIM signature, and equally returns dkim=pass if the DKIM signature was okay. More info

Part of the journey the email took to reach us/you, these tend to be in the order bottom-to-top so the first 'Received' is the last step the email took and the last 'Received' is the first step the email took

Part of the journey the email took to reach us/you, these tend to be in the order bottom-to-top so the first 'Received' is the last step the email took and the last 'Received' is the first step the email took

Included, usually 1.0, if the email or header contains any non-ASCII characters or non-text attachments, or if the email is multi-part (contains a plain text version plus an HTML one, lets the user's email client or webmail decide which version to display)

1.0

Content-Type:

What type of content the email usually is, usually text/html, and what character set is used

text/plain; charset=UTF-8

Content-Transfer-Encoding:

How the email has been encoded to comply with regulations (e.g. maximum characters per line)

7bit

References:

Facilitates the threading of emails; helps the email client piece together which emails belong together in a conversation

[email address removed]

X-Mailer:

The software used to send the email. Spambots, including those used by scammers, often falsify this as a version of Outlook or Outlook Express to get through some spam filters

Your content is below the advert

The scam

Dear Customer,

Your Urgent Reply is Need Because we Find Your ATM Card In Our Office Since Last week That You Are The Owner Of The ATM Card which worth The Sum Of $10.7Million Us Dollar, J F Kennedy International Airport

Please be careful with the links in the above email - Scammed.by strongly suggests that you do not click on any links in the above messageThe email above is most likely a scam but every now and then legitimate emails do come through, as do spam emails which are not attempting to defraud, so please use your judgementYou can contact ScamSearch at help at scammed.by for any information, help, or if you have spotted a legitimate email. Please link to the email you think is legitimate.ScamSearch does not accept any responsibility for visitors enduring any issues as a result of following links in the above email and/or contacting the senderPlease do not contact the sender unless you know what you are doing (i.e. experienced scambaiters)